Twilio hacked by phishing campaign targeting internet companies

How much you need to invest in a certain technology is a different story, this doesn't mean it's not virtually bulletproof. But that's why I was trying to figure out if the same technology from hardware tokens could also be implemented in another way. I guess this is what they are trying to do with Passkeys. Although I would also loved to have seen Intel's U2F technology, see link.

https://www.pcworld.com/article/407...wo-factor-authentication-from-your-phone.html

 

Turns out that Dropbox has been hacked too, via some GitHub phishing attack which was able to record username, password and 2FA code, so I assume this was a MITM attack. They have now decided to switch to hardware tokens like YubiKey.

https://thehackernews.com/2022/11/dropbox-breach-hackers-unauthorizedly.html